Adding rights to a Domain User

[Twincharge]

Chaps

I've set up a Server running Server 2003 Small Business, it controls DHCP and DNS, and also runs Exchange Server. There are 8 PCs connected to this Server via the Network on a local domain.

Currently, only I possess the Administrator password, to prevent people from messing about on the Server.

Problem is, the Users want to be able to install software on their PCs, and add 3rd party email accounts to Outlook. How do I give them these rights without making everyone an Administrator?

I do not want anyone to be able to log onto the Server.

Thanks

[MsDG]

You don't mention which OS the PC's are running (may help slightly).

However, the bottom line is with software installs is you have to give them admin accounts (this pretty much defines an admin account).

In fact with Windows 7,they are pretty much going in the direction of letting the users do everything (admin) or nowt (users) and nothing in between. Yeah you can define group policy for users to have more access to do more stuff, but software installs is the exception.

However, you can give them local admin of the PC (which will let them do whatever) without making them domain admin
(just go onto the local PC, control panel - users - add - enter username, domain will be the name of the local pc, and obviously select administrator)

[JonEp]

Add them to Local Admin Group which has nothing to do with admin access to the SBS.

EDIT: I just noticed MsDG got in there first..

[MsDG]

Fuck me, there's an echo in here

[JonEp]

Fuck me, there's an echo in here

Na your just hearing voices

[Twincharge]

Thanks guys - that worked a treat.

[Over Carl]

That method will work, but you need to specify which user gets admin on which pc, can be a pita if users are hopping between machines. I was told to set all our work pc's up with all domain users as local admin which gets round this issue, but I would very strongly advise against this as it means anyone can get in anyone else's administrative shares and go through their whole pc!

Personally I wouldn't advise giving users admin cos then they can install what ever they want and how can you make any claims regarding compliance if you were checked out by the likes of fast? If they really need to install apps, tell them to call you and you can rdp/vnc to them and quickly take care of it. Also I've found the pc's that have had users installing wtf they want to them happen to be the ones that keep needing reimaging in the field.